Generate a self-signed cert when none is provided

The documentation suggested doing this manually, but this is better because it does it for you!
It's going all over the place! *ick*

It would be better to have all the cert stuff placed in one folder, so that users only have one place to go to delete the stuff, and then they can re-run the script to generate a new keypair.